Before you start

This tutorial walks you through all the steps needed to configure WS-Security for a JAX-RPC web service to run in WebSphere Process Server V7 in one WebSphere cell, and a JSP client to run in a different WebSphere cell. It also provides all the steps needed for single sign-on across WebSphere cells.

Although WS-Security addresses message-level authentication, confidentiality, and integrity, the scope of WS-Security in this tutorial is limited to propagating credentials through the use of Lightweight Third Party Authentication (LTPA) tokens. Other means of propagating credentials in the WS-Security envelope are supported in WebSphere Application Server.

Objectives

The objective of this tutorial is to make it easy for WebSphere users to configure WS-Security for a JSP client to run in a WebSphere cell and a JAX-RPC web service to run in a WebSphere Process Server cell.

Back to top

Prerequisites

To follow the steps in this tutorial, you need WebSphere Integration Developer V7 to configure WS-Security for the JSP client and the JAX-RPC web service. The WebSphere Process Server test environment that comes with WebSphere Integration Developer is adequate to run the test, but you need to create another WebSphere cell for the JSP client to use the single-sign on capability through LTPA.

Back to top

System requirements

• WebSphere Integration Developer V7
• WebSphere Process Server V7 test environment that comes with WebSphere Integration Developer
• Another WebSphere cell

Back to top

Duration

2 hours

Back to top

Download files

You can download the following project interchange files from the Download section:

• PI_Start.zip
• PI_Final.zip

1 of 15 | Next

Comments

Back to top

Table of contents

• Before you start
• Introduction
• Configuring single sign-on
• Using the sample code
• Adding a security role for dynamic web module 2.4
• Adding a security role for dynamic web module 2.5
• Configuring WS-Security for the web service
• Configuring WS-Security for client 2.4
• Configuring WS-Security for client 2.5
• Testing
• Conclusion
• Acknowledgement
• Downloads
• Resources
• About the author

---

1 of 15 | Next

Next steps from IBM

Rational Application Developer provides a comprehensive Integrated Development Environment (IDE) used to develop Web 2.0 applications requiring J2EE, Servlets and JavaServer Pages (JSPs).

---

• Try: Try the free Rational Application Developer (RAD), which helps developers quickly design, develop, test, analyze, and deploy high-quality Java, Javaserver pages, J2EE and Web 2.0 applications.
• Article: See how Rational Application Developer and Service Data Objects have been extended to JavaServer Pages to create data views and database queries using a simple, wizard-based, drag-and-drop technology.
• Tutorial: Take a look at developing a J2EE Web application and JavaServer Pages (JSPs) for both an HTML input form and the HTML output from the server, using Rational Application Developer.
• Demo: This demo highlights the enhanced Web 2.0, rich Internet application development features in Rational Application Developer including AJAX and Java Persistence API application development.
• Buy: Rational Application Developer for WebSphere Software

Dig deeper into WebSphere on developerWorks

Try IBM PureSystems. No charge.

Experience today!

---

Get started with the cloud-based trial and pattern development kit.